User has to acts_as_authentic